Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tDxr-9IiEy9SCWyalXG3dsKSbKo.roa
File: tDxr-9IiEy9SCWyalXG3dsKSbKo.roa (raw, json)
Hash identifier: iimm8rDwe6P2YaRPtrmeeHwIr2z4gfs6pUDpMHwFY5c=
Subject key identifier: B4:3C:6B:FB:D2:22:13:2F:52:09:6C:9A:95:71:B7:76:C2:92:6C:AA
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BE11EBF7C0285A6C48B607B001F61
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tDxr-9IiEy9SCWyalXG3dsKSbKo.roa
Signing time: Thu 02 Jan 2025 09:49:51 +0000
ROA not before: Thu 02 Jan 2025 09:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198408
IP address blocks: 77.65.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e1:1e:bf:7c:02:85:a6:c4:8b:60:7b:00:1f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b43c6bfbd222132f52096c9a9571b776c2926caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:7f:4c:3f:f4:b0:b9:b4:e6:40:1d:71:74:56:
aa:75:f6:bd:27:88:e3:50:c5:84:3a:88:4f:f6:7a:
c9:44:28:7f:22:7d:0a:41:33:0b:d8:d1:75:0d:4f:
b7:dd:1e:ae:7d:e2:ac:89:09:16:66:dd:3f:96:00:
22:b5:fb:03:05:11:1a:e8:a7:70:54:5e:5c:b8:49:
5a:65:fc:0d:7a:ce:1f:c5:7b:a1:2a:66:3b:d7:53:
4d:0d:0d:19:11:ee:27:fd:1f:0d:e8:cc:9d:6e:f7:
2e:1b:f7:7f:c9:5e:26:f6:ab:66:5f:03:60:14:f5:
65:49:ee:65:63:ab:e5:95:e1:4a:21:e7:01:7e:f0:
a0:0b:64:71:d7:6a:e3:30:24:1d:ca:f3:de:16:a2:
7a:d0:b5:68:f8:5c:21:a4:be:3b:54:a6:bb:95:66:
eb:58:fd:b2:a7:0a:9d:47:a7:3c:3c:02:9a:79:e4:
82:f6:07:af:d8:f1:30:a2:00:53:27:46:2c:e2:54:
d1:ec:34:75:44:df:c5:95:61:b9:a2:50:04:c3:f3:
5b:fe:bc:9b:67:c8:c3:9d:35:56:61:01:93:1f:61:
04:66:5d:ae:85:d9:ca:26:9a:b6:24:b5:6d:5a:20:
85:29:aa:df:23:71:7c:ee:b6:95:9d:16:e1:57:f1:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3C:6B:FB:D2:22:13:2F:52:09:6C:9A:95:71:B7:76:C2:92:6C:AA
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tDxr-9IiEy9SCWyalXG3dsKSbKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.189.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:cc:73:b9:c2:0d:75:ab:e7:ab:0b:85:35:b3:cc:a1:bc:c7:
48:8d:25:ac:c8:ea:24:cc:90:14:bc:fe:ee:20:63:e1:d4:52:
fc:96:28:db:13:46:54:d9:d0:50:52:b1:5f:09:30:56:61:95:
51:2d:cd:bd:7b:8d:fe:69:ad:62:5e:43:c0:cb:5b:0b:82:4d:
f5:a5:02:74:89:a1:b6:4f:f1:31:79:e3:ac:d9:5e:50:6a:9a:
1b:f9:ff:f5:b2:8b:67:56:f9:dc:94:dc:8a:5d:6b:fe:e6:34:
55:5a:2a:99:5c:b8:99:1f:90:02:0e:42:da:d5:cf:83:b9:92:
e1:f5:d0:42:a8:3a:99:36:d4:44:a3:1e:53:dd:3b:02:3c:58:
ff:bb:ba:f8:ab:9b:9a:44:35:ea:6e:4d:8c:1c:17:a6:ce:a1:
db:2a:44:6c:2e:5d:ca:4f:b9:b0:ff:ef:e5:9b:5e:6d:01:b1:
ef:fc:7b:35:f0:45:bc:2a:d6:51:41:45:3b:07:f8:64:64:dd:
ba:bb:79:5c:c1:15:5c:2c:58:d4:2f:a6:27:38:1a:b8:74:79:
a5:80:99:fe:63:d7:ac:b9:23:f0:2c:bc:d8:1c:c3:00:09:17:
29:b5:d2:a6:a2:8e:17:d6:8b:48:8a:20:74:b0:42:19:6a:31:
30:7c:f3:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma+Eev3wChabEi2B7AB9hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjUwMTAyMDk0OTUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDNjNmJmYmQyMjIxMzJmNTIwOTZjOWE5NTcxYjc3NmMyOTI2Y2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+H9MP/SwubTmQB1xdFaqdfa9J4jj
UMWEOohP9nrJRCh/In0KQTML2NF1DU+33R6ufeKsiQkWZt0/lgAitfsDBREa6Kdw
VF5cuElaZfwNes4fxXuhKmY711NNDQ0ZEe4n/R8N6MydbvcuG/d/yV4m9qtmXwNg
FPVlSe5lY6vlleFKIecBfvCgC2Rx12rjMCQdyvPeFqJ60LVo+FwhpL47VKa7lWbr
WP2ypwqdR6c8PAKaeeSC9gev2PEwogBTJ0Ys4lTR7DR1RN/FlWG5olAEw/Nb/ryb
Z8jDnTVWYQGTH2EEZl2uhdnKJpq2JLVtWiCFKarfI3F87raVnRbhV/Hu7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLQ8a/vSIhMvUglsmpVxt3bCkmyqMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvdER4ci05SWlFeTlTQ1d5YWxYRzNkc0tTYktvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUG9MA0G
CSqGSIb3DQEBCwUAA4IBAQCLzHO5wg11q+erC4U1s8yhvMdIjSWsyOokzJAUvP7u
IGPh1FL8lijbE0ZU2dBQUrFfCTBWYZVRLc29e43+aa1iXkPAy1sLgk31pQJ0iaG2
T/ExeeOs2V5Qapob+f/1sotnVvnclNyKXWv+5jRVWiqZXLiZH5ACDkLa1c+DuZLh
9dBCqDqZNtREox5T3TsCPFj/u7r4q5uaRDXqbk2MHBemzqHbKkRsLl3KT7mw/+/l
m15tAbHv/Hs18EW8KtZRQUU7B/hkZN26u3lcwRVcLFjUL6YnOBq4dHmlgJn+Y9es
uSPwLLzYHMMACRcptdKmoo4X1otIiiB0sEIZajEwfPMd
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:04:37 2025 by rpki-client